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Top Stories 

• Bank of America agreed to pay $131.8 million in penalties to settle U.S. Securities and 
Exchange Commission charges that the company’s Merrill Lynch division misled investors 
in the sale of collateralized debt obligations. - New York Times (See item 3 ) 

• A report from Praetorian analyzed 275 mobile banking apps and found that 80 percent 
contained configuration and design weaknesses that could compromise security. - Dark 
Reading (See item 4 ) 

• The U.S. Citizenship and Immigration Services approved the development of the Louisiana 
International Gulf Transfer Terminal Regional Center, opening up a new supply chain that 
will reach 32 States and Canada. - Fort Mill Times (See item 10 ) 

• A Minnesota National Guardsman was charged in connection with stealing personal 
information of about 400 members of a former Army unit in Lort Bragg, North Carolina, 
intended for use to create fake IDs for a militia. - Associated Press (See item 22 ) 
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Energy Sector 



Nothing to report 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

1. December 13, Los Angeles Times - (National) Honda recalls all- wheel-drive Acura 
MDX sport utilities. Honda announced the recall of 19,197 model year 2014 Acura 
MDX vehicles equipped with all-wheel-drive due to loose drive system bolts that could 
cause noise or damage the vehicle. 

Source: http://www.latimes.com/business/autos/la-fi-hy-acura-mdx-recall- 
20131213,0,6952608.story 

2. December 12, U.S. Department of Labor - (Texas) Houston-based Piping 
Technology and Products Inc. cited by US Department of Labor’s OSHA after a 
worker is struck by a machine part. The Occupational Safety and Health 
Administration cited Piping Technology and Products Inc., for four repeat and three 
serious violations at its Houston facility after a worker was injured. Proposed fines 
totaled $199,800. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25236 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 



3. December 12, New York Times - (National) Bank of America to pay $131.8 million 
penalty in mortgage deals. Bank of America agreed December 12 to settle U.S. 
Securities and Exchange Commission charges that the company’s Merrill Lynch 
division misled investors in the sale of collateralized debt obligations, and agreed to 
pay $131.8 million in penalties. 

Source: http://dealbook.nytimes.com/2013/12/12/bank-of-america-to-pav-131-8- 
million-penalty-in-c-d-o-deals/ 

4. December 12, Dark Reading - (International) Weak security in most mobile banking 
apps. A report from Praetorian analyzed 275 Apple iOS and Android mobile banking 
apps and found that 80 percent contained configuration and design weaknesses that 
could compromise security. 

Source: http://www.darkreading.com/vulnerabilitv/weak-securitv-in-most-rnobile- 
banking-app/240 1 647 3 1 

5. December 12, Chicago Tribune - (Illinois) $5,000 reward for information about 
‘Hooded Bandit.’ The FBI offered a reward for information on a suspect known as the 
“Hooded Bandit” believed to be responsible for at least four bank robberies in 
Chicago’s northwest suburbs. The suspect’s most recent robbery occurred December 9 
at a Chase Bank branch in Bensenville. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-fbi-looks-to-identify- 
hooded-bandit-20 131212,0,4630951. story 

6. December 11, WX1N 59 Indianapolis - (Indiana) Major counterfeiting operation 
busted on Indy’s east side. Police and U.S. Secret Service agents raided a home in 
Indianapolis and discovered hundreds of thousands of counterfeit bills as well as 
computers and printing equipment. Three people were arrested in connection with the 
alleged operation. 

Source: http : //fox5 9 . com/20 13/12/1 1/maj or-counterfeiting-operation-busted-on-indys- 
east-side/ 
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Transportation Systems Sector 

7. December 13, KRMG 740 AM Tulsa/1 02.3 FM Sand Springs - (Oklahoma) BNSF : 
Vandalism may have led to crash involving two trains. Roughly twelve cars of a 
freight train that derailed in Tulsa and closed north and southbound lanes of Yale and 
Sheridan roads for several hours December 13 may have been due to someone 
deliberately decoupling a train, Burlington Northern Santa Fe stated. Crews also 
worked to cleanup a reported 3,000 gallons of diesel fuel that was leaking into Coal 
Creek. 

Source: http://www.krmg.com/news/news/local/freight-train-derailment-spills-diesel- 
fuel-coal-c/ncKHm/ 
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8. December 12, WISH 8 Indianapolis - (Indiana) Scrappers stealing copper from light 
poles. The Indiana State Police are investigating 90 cases of scrap metal thefts from 
light poles along Indiana highways that have caused an estimated $200,000 worth of 
damages. 

Source: http://www.wishtv.com/news/indiana/scrappers-stealing-copper-from-light- 
poles 

9. December 12, Selma Times-Journal - (Alabama) Train derailment closes County 
Road 83. A Norfolk Southern train that derailed December 12 on Dallas County Road 
83 after experiencing mechanical problems prompted the road’s closure from Alabama 
Highway 14 to the railroad tracks until the train is removed December 13. 

Source: http://www.selmatimesiournal.com/2013/12/12/train-derailment-closes-countv- 
road-83/ 

10. December 12, Fort Mill Times - (International) U.S. government approves Louisiana 
International Gulf Transfer Terminal Regional Center. The U.S. Citizenship and 
Immigration Services approved the development of the Louisiana International Gulf 
Transfer Terminal Regional Center, opening up a new supply chain through the 
Mississippi River and its tributaries that will reach 32 States and Canada. 

Source: http://www.fortmilltimes.com/2013/12/12/3162499/us-government-approves- 
louisiana.html 
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Food and Agriculture Sector 

11. December 13, Associated Press - (North Carolina) 2 shot and wounded at NC 
chicken plant. A suspect is in custody after two men were shot and injured in the 
parking lot of the Tyson Foods chicken plant in Monroe, North Carolina, December 13. 
Source: http://www.enquirerherald.com/2013/12/13/283179Q/2-shot-and-wounded-at- 
nc-chicken.html 

12. December 12, Food Safety News - (National) E. coli outbreak linked to salads 
declared over with 33 sick. The U.S. Centers for Disease Control and Prevention 
announced the end of an E. coli 0157:H7 outbreak December 12 linked to ready-to-eat 
salad products produced by Glass Onion Catering and sold at Trader Joe 
establishments, which sickened 33 people in four States. 

Source: http://www.foodsafetynews.com/2013/12/e-coli-salad-outbreak-declared-over- 
with-33-sick 

13. December 12, Central Valley Business Times - (National) Multi-agency emergency 
response to save citrus. The U.S. Department of Agriculture organized a unified, 
multi-agency coordination group that will lead efforts to address Huanglongbing, a 
disease that is fatal to citrus trees. The new framework allows for research projects and 
solutions to combat the disease. 

Source: http://www.centralvalleybusinesstimes.com/stories/001/?ID=24791 
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14. December 11, U.S. Food and Drug Administration - (National) Whole Foods market 
Mid-Atlantic region recalls spinach dip due to undeclared egg. Whole Foods 
Market’s Mid- Atlantic Region recalled an organic creamy spinach dip December 11 
due to an undeclared egg ingredient in the product. 

Source: http://www.fda.gov/Safety/Recalls/ucm378448.htm 

15. December 11, U.S. Food and Drug Administration - (National) Blooming Import Inc. 
issues an alert on undeclared sulfites in Golden Lion Brand Dried Ziziphus Jujuba 
Mill (dried dates). Brooklyn-based Blooming Import Inc., recalled its Golden Lion 
Brand Dried Ziziphus Jujuba Mill dried date products because it contains undeclared 
sulfites that were discovered following a routine sampling by New York State 
Department of Agriculture inspectors. 

Source: http://www.fda.gov/Safety/Recalls/ucm378465.htm 

16. December 11, KCBS 2 Los Angeles - (California) Sriracha maker forced to halt 
shipments due to health concerns. The California Department of Public Health forced 
Huy Fong Foods and its distributor Giant Union Co., to halt shipments of Sriracha hot 
sauce until mid-January 2014to ensure an effective treatment of micro-organisms 
present in the product. 

Source: http : //losangeles ■cbslocal.com/20 13/12/11 /sriracha-maker-forced-to-halt- 
shipments-due-to-health-concems/?hpt=us bn 10 

17. December 10, Durango Herald - (Colorado) James Ranch beef involved in recall. 
The U.S. Department of Agriculture’s Food Safety and Inspection Service announced a 
recall of about 90,000 pounds of meat and poultry, including James Ranch Beef 
products and products packaged by Yauk’s Specialty Meats of Windsor due to 
unsanitary production and packaging conditions after an inspection at the plant near 
Durango December 12. 

Source: http://durangoherald.com/article/20 13121 0/NEWSO 1/1 3 121 9992/- 
l/BLQG06aboutabout/James-Ranch-beef-involved-in-recall- 
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Water and Wastewater Systems Sector 

Nothing to report 
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Healthcare and Public Health Sector 

18. December 13, Associated Press - (Iowa) 43 residents evacuated from Norwalk 
nursing home after water begins leaking. A December 12 water leak at Norwalk 
Nursing & Rehabilitation Center in Des Moines caused the evacuation and 
displacement of 43 residents. Patients were taken to nearby care facilities while 
authorities investigated the damage. 
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Source: 

http://www.therepublic.com/view/story/e0491913c6ee490cbda9351478d6ceba/IA— 

Nursing-Home-Evacuated 

19. December 11, KWES-TV 9 Midland/Odessa - (Texas) Odessa retirement community 
working to sanitize their building after norovirus outbreak. A norovirus outbreak 
that sickened 33 residents at Lincoln Towers in Odessa prompted the retirement facility 
to sanitize common areas and limit access to the parts of the building. 

Source: http://www.newswest9.com/storv/24198605/odessa-retirement-community- 
working-to-sanitize-their-building-after-noro virus-outbreak 
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Government Facilities Sector 

20. December 13, KGO-TV 7 San Francisco - (California) Crash forces elementary 
school closure in San Rafael. Laurel Dell Elementary School in San Rafael was closed 
December 13 after a car crashed into the school December 12 causing a gas leak and 
injuring the individuals in the vehicle. The accident damaged electrical equipment and 
knocked out power and gas in the building. 

Source: http://abclocal.go.com/kgo/storv?section=news/local/north bay&id=9359113 

21. December 13, KMSP 9 Minneapolis - (Minnesota) Pine County man arrested in 
white powder mailing, fake bombs. Authorities arrested a man December 12 in 
connection with mailing six envelopes containing mostly harmless bacteria in the form 
of white powder to a Pine County sheriff, two deputies, two judges, and a county 
attorney in November. 

Source: http://www.mvfoxtwincities.com/storv/24209341/man-arrested-after-white- 
powder-mailed-to-pine-county-courthouse 

22. December 12, Associated Press - (North Carolina; Minnesota) Guardsman accused of 
stealing military IDs for militia. A Minnesota National Guardsman was charged in 
connection with stealing personal information, including Social Security numbers and 
security clearance levels, of about 400 members of a former Army unit in Lort Bragg, 
North Carolina, intended for use to create fake IDs for a militia. An LBI investigation 
uncovered the Guardsman’s theft of confidential information. 

Source: http://news.msn.com/crime-iustice/guardsman-accused-of-stealing-military- 
ids-for-militia 

23. December 12, WSAW 7 Wausau - (Wisconsin) 30 percent of Rhinelander school 
sick, prompting Friday school closure. A high incidence of a variety of illnesses 
among 30 percent of students and several staff members prompted Pelican Elementary 
School in Rhinelander to close December 13 as a precaution. The school will reopen 
December 16. 

Source: http://www.wsaw.com/home/headlines/30-Percent-of-Rhinelander-School- 
Sick-Prompting-Friday-School-Closure-2356 1 9131 .html 
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Emergency Services Sector 

24. December 12, Federal Communications Commission - (National) FCC adopts rules to 
make 911 calling more reliable. The Federal Communications Commission adopted 
rules December 12 including, auditing 9-1-1 circuits for physical diversity, maintaining 
central office backup power, and maintaining reliable and resilient network monitoring 
systems in order to ensure 9-1-1 calls throughout the U.S. are delivered during 
disasters. 

Source: http://www.fcc.gov/document/fcc-adopts-rules-make-91 1 -calling-more-reliable 
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Information Technology Sector 

25. December 13, Help Net Security - (International) Cryptolocker copycat targets US, 
European users. Researchers at IntelCrawler analyzed a new piece of ransomware 
dubbed Locker that encrypts targets’ files and demands a ransom to decrypt them. The 
ransomware is spread by executable files disguised as mp3 files. 

Source: http://www.net-security.org/malware news.php?id=265 1 

26. December 13, Softpedia - (International) Serious vulnerability in Safari exposes user 
passwords. Researchers at Kaspersky discovered a security issue in some versions of 
Apple’s Safari browser that stores passwords in plain text in a hidden folder utilized for 
the browser’s session restore function. 

Source: http://news.softpedia.com/news/Serious-Vulnerability-in-Safari-Exposes-User- 
Passwords-408935.shtml 

27. December 13, Softpedia - (International) Hacker tool allows cybercriminals to 
automatically register Tumblr accounts. A researcher at Webroot identified a 
commercially available tool that can be used by cybercriminals to automatically register 
Tumblr accounts for use in phishing and other campaigns. 

Source: http://news.softpedia.com/news/Hacker-Tool-Allows-Cvbercriminals-to- 
Automatically-Register-Tumblr- Accounts-408 8 89 . shtml 

For another story, see item 4 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-ccrt.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



28. December 13, WYMT 57 Hazard - (Kentucky) Copper theft knocks WSGS-FM off 
the air. WSGS 101.1 FM in Hazard, Kentucky, was knocked off air December 10 and 
December 1 1 due to damage caused by copper thefts. The thefts also interrupted 
Internet and broadcast service for at least three other radio stations in the area. 

Source: http://www.wkvt.com/wymt/home/headlines/Copper-theft-knocks-WSGS-FM- 
off-the-air-235686621.html 
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Commercial Facilities Sector 

29. December 13, Staten Island Advance - (New York) Man sought for questioning in 
copper piping theft at Staten Island warehouse. Costal Plumbing Supply reported 
that their warehouse in Staten Island was broken into December 2 and copper piping 
worth approximately $10,000 was stolen. Police are seeking an individual wanted for 
questioning in connection to the incident. 

Source: 

http://www.silive.com/news/index.ssf/2013/12/police seek to identify allege.html 

30. December 12, WWMT 3 Kalamazoo - (Michigan) Over 12 displaced, 1 injured after 
motel fire. A December 12 fire at the Holiday Motel in Portage caused an evacuation, 
displacing 12 residents and sending 1 person to the hospital. The motel sustained water 
and smoke damage to several rooms. 

Source: http://wwmt.com/news/features/featured/stories/over-12-displaced-l-iniured- 
after-holiday- motel-fire-4 112. shtml 
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Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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